LibreOffice and OpenOffice Multiple NULL Pointer Dereference Denial of Service Vulnerabilities

Bugtraq ID:	56352
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2012-4233
Remote:	Yes
Local:	No
Published:	Oct 31 2012 12:00AM
Updated:	Oct 31 2012 12:00AM
Credit:	High-Tech Bridge Security Research Lab.
Vulnerable:	Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

LibreOffice and OpenOffice Multiple NULL Pointer Dereference Denial of Service Vulnerabilities

LibreOffice and OpenOffice are prone to multiple denial-of-service vulnerabilities caused by NULL-pointer dereference errors.

An attacker can exploit these issues to cause the application to crash, denying service to legitimate users. Due to the nature of the issues, code execution may be possible, however, it has not been confirmed.

LibreOffice and OpenOffice Multiple NULL Pointer Dereference Denial of Service Vulnerabilities

Exploit codes are available. Please see the references for further information.

LibreOffice and OpenOffice Multiple NULL Pointer Dereference Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

LibreOffice and OpenOffice Multiple NULL Pointer Dereference Denial of Service Vulnerabilities

References:

• LibreOffice Homepage (LibreOffice)
  
• OpenOffice Homepage (OpenOffice)